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* 

Biol*, a°x v— pmrn^-pmrn- 1 ©u— a 2 ©«*&w*t^d y * 

« 

huh 01 £^-r-7*-^#:fiigi 1 ©^^^-tVd^^eit^^o 

Rt^-U— A* 2 ©^^r^T^D y ^ 0T 
01 7(1 0 5 C^tS^gS 1 ©M&^t^D 5/ ^7 §. 

01 8(1 0 5 {d^c-r+f-— A2©^J&£^c-r:/Dy #0T353o 

0 2 1(1 ^*(C^m^-^*«#U^:V^-&©31Rli^t5:^#^g5©^ 

£ T ^ n y i7 0 -c & -5 o 

02 2 (1 02 1 (C^f -X— ^^ff^5 1 ©M^t^Dy^raS. 
02 3(1 ^(C^-^^#L^Vi^©^PS^m^#^B5©^^ 

02 4(1 02 3 (^-Tx— ^«7n§g5 4©iM^tyD7^ra§« 

02 5(1 ^(-^^^-^^^^-^^©^Ps^m^^Ms©^ 

02 6(1 0 2 5CSfT-^M5 lOM^t^ny^TO^. 
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z\z\x\ &Tommiz&\,*xm^zm^iz^^Tmwi<T33< 0 

P, q\$m$kX&Q, q I p-lt^5i«§. q I p - 1 q«p 
- 1 *m®£Z>Z:£(D-CgZ>mT'&Z>Z\t.&mi&TZ>o mtc. g, htimod 
P_h0^q©WI®#:(^) G= {g J mod p: 0^j<q} <£>£/&7nT& 
§ (^P3ft^±©^T ! fe)|W|D<fc-5^^T^§) o Z\Z\X\ "g J mod p" 

j ^b^ffi^rpTfiJofe^D (Remainder) 
<h^-51c^^§ 0 z\Z\X. g«(l<g<p-l, g'=lmodp, g 1 * 
lmodp (0< j <q) )Xfcfy, htth = g 4 modp^S, O^D, p, 
qfeWiW&%: mfoomm £^To mXU, H=h x modp(0<x<q) 

5£*km^&*kznz>n,mzRe (z/qz) *&mftmz§ij$,'?z> 0 z\z\x, 

(Z/qZ) *» {1, 2, • • q} (D^^^fo Ntt/U7- 
HcDS^Sr^fo || IJISlig (concatenat ion) t^t 

<mmmm<DW%uk> 
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wtg#ffl©AX7~K§8IE:r-:*H£, a.— tm#;9©{fiP' ^^$tl> 

■ 

1 

■ * 

(1) ^m^mm-rs^ (^©n 

• — 

litsf -not^t-^ f£ 0 x §f t tts 1 ^#5^ (p' (x) = 

oi-xmodq) 1J— MOlRj&tnfl^ofcSn^^^: (p' (x) = 
a,-x+a 2 -x 2 + - • • + a n • x n mo d q) £^§£T-5 0 ate; 
(Z/qZ) *J&>£>fttfts&K:g&;n£. #|;5tfe£, — 0©1t— A©*§£\ p' (x) 
te> p' (x) =a I 'xmodQift:5 0 £ClTx a.— !f«il TV* 
&A°X«7-F " Pooh 9 3") £A#T3„ &mi££=L—*?0^ 

93 modp(:J:!3f|-lTt5. p' (1) «p' (x) Tx©ft:b 

D Kit*— A© I D (0!l7Lteu rij.) ^Anxth^bfc^-e^^o 

ftg&K&s^u i 2«#^^s^e»^$n^#^p* =p' (x) 

(2) (-e©2) 
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lit§t-AW-^fcofcex§fti:W^S (p' (x) = 
ffrxmodq) £\ it— AOffc/^nlBfco £ n&#^5£ (p' (x) = 
a,'x + ff2'x 2 +' • • + a n • x n mo d q) Srfife'f&o HilT^ att 
(Z/q Z) >6^fcl«n«. #l;Lfc£> -0©t*-A©»£\ p' (x) 
p' (x) =a 1 'xmodq^§„ cIT, 3.— if »SWATV> 
H (fllfcfcf, " Pooh93") $A^3t5. #Si£<fc:x— if©A 
Xy-H^A^^nfeSAXy-H^liE^-^^^l 1 2tt, /U7- HIS 
SE^-^H^r^-r^o AXy-FME^-^HteU 0!J;lfc£H=p (1) = p' 
(1) +Pooh9 3modqll,J;!3tlTt§. £ p' (1) «p* 

(x) 7?x©^t>Dtcij— a*© i d (w^t«, r i j ) '&Atix mm vrcm-r? 
— if©»*s«©rti»fc&s**u.i 2 «#^^^^e»^^$n^#-^ 

5$P' = p ' (x) £fB1lL>T&#T£o 
(3) M^Ci:AyS/3.H»[ftJfi|ffl-r<5»^ (^-©1) 

S»-rsU— AW^fc*ofc&x§fttt5 1^#^ (p' (x) = 
a,-xmodN) -y-AOt^nifc'ofcenM^ (p' (x) = 
Q!i • x + a 2 • x 2 + • • • + at„ • x n mo dN) ei^X, att 

(Z/q Z) *)6^i^l:l«n5. 00*fc£» — A*©«-&* p' (x) 
p' (x) =«, • xmo dNifeS, -tbT* Ay>aH*»4gl 2 
0 «fc D ^>^A£A y SH^tS. HA S H«— ^JbIA «/ 

Pooh 9 3") &A*fT£o ^^t/N^^^P^irL-if^AXy-H^ 
A^ftfc^AX? — FIBBER— 2 1 AX «7— H^BE^—^H 

AXy-H^IE^-^H^ #!I^^H = h p<1) modp(cJ;DW- 
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^r#3o ££Tp (1) p (1) =p* (1) +HASH (Pooh9 
3 II ID (U) II ID (S) ) modNJCfcOfHTr*. ID (U) 

<hID (S) tt-ttl^tin.— if £if— A CD I D^fo p' (1) fc£ 

p' (x) Tx©^t)DiC rij AnT^bfeiitTab'So 

SM»*rs*9— A<D«c*Jn©»-&, FSIE't*— ^£js£g§ 1 

— HISSED- ^HteU m«H=h p(!) modp(ai3l|-lTtl., ilZlTp 
(i) fcJU p ( i) =p' (i) +HASH (P o o h 9 3 II I D (U) II I 
D (S) .) mo dNfcJcOih^r^o ID (U) ilD (S) U^tH 

^n=L— if £ i #g(D1f— A*© I D^t. p* (i) ttn^#^ 

p' (x) T?x<Df^feDiC r i j £AtlT9M*b;fcfltn!*£. 

/U7- FWE?*— *Htt:x— - tf^a^tcif— KtzmV1±K>* SfTM 

p' (x) t A y ->a««:5S4»* 5564Sn&A y MftH A S H t S- 
miZP' = (p' (x) , HASH) ibT|BtfebT^#i-^>o 

Sftt ^-MOife^^o & 6 x S« ft t ts 1 (p' (x) = 

ax-xmodN) 1*— /t©ftj&tnffi)£ofc& n&^E^i (p' (x) = 
Q!i-x + a 2 -x 2 + - • • + a n • x n mo d N) £fg£t*<5o £ £7?* a 

(z/qz) ^©•y—/t©»'&, p' (x) 

te\ p' (x) = a ! • xmo dN£&£o ^LT, Ay>aHjR5S4Sl 2 
0 CJ;D7>yA{:A>r>alliHASH$Mt5. HA S H«— ^Ay 
>-^HftT^^o H (fllfcfcf, " 

Pooh93") ^StA>r>a|||:ii- tfcDA 0 *?— Fd* 
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&§if&~r& 0 Axy—Fwrn^—pHfe. ^j^^h=p (1) =p' (1) + 

HASH (P o o h 9 3 II I D (U) II I D (S) ) m o d N \Z J; X> tUTT^ 

nciT, id (u) i i d (s) i&3tn j en=L—*fh-yr—n<D 1 d^-To 

d^T. p' (1) tep' (x) Tx©ft:foDfc r 1 j AtlTH-ftfclTS 

mXU. g®T5-tf---A©8cj&*n ©«-&, AXy-H^SE^-^^Sl 2 
ltt, i#@01J-~n^bTA 0 X , 7--H^liE7 i '-^H^^t-§o 

^Htt, #J;tfc£H=p (i) =p' (i) +HASH (Pooh 9 
3 II I D (U) II ID (S) ) modNtiOtl-fTf^. ID (U) 

tiD (s) tt^-n^na- tft i #g©if— a© i d^st, p' 

(i) ttn^lip' (x) T?x©ft;bDfc r i j fcAnTW-JfLfcttT?* 

( x) £ A y ^a.««dffi^»*» 6»fe*nfcA y v'aMSHAS H t J&fcl 
P' = (p' (x) , HASH) £LT!31iiL'T##-r3o 

* » 

(5) Ay^aHRSfUffl-r**^ (^©1) 

0 3£#RgbT, Ay5^aHI&*jpJffl-rS»-& (^©1) fc^HTtfc 

Aiy>aHftl84«l 1 3 f) 7 > y A A «r> a H t H A S H & 

CT* n.-if«g^^^xV^A°X , 7-H.(^J^.^> " Pooh 9 3") £ 
A#-T3o Ayv'aMlcHASH«hMtS ( !:a-1f©/U7-H^A*$n 
fc&/U7- KISSED— 1 S^/Uy-KIEf-^H^^t 

§, /U7-HBKf-^Htt, MAfcf* H=h HASH(s,p<,oh33!ID(u> DID<5,) 
modpCcfcDIt-lT'tS, ID (U) tID (S) fe^tl^n^-— 
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if £U— A© I D&m-fo /U7- F mU'r— & H if ^ISS \Z.^—n \Z 

£«1 1 3 1 1 4^e»M$tlfcA>r>a||tHASHti 

SfiStl-JSfcP' = (S, HASH) tUTtBttbTfiMTT*. 

(6) AyS/aHafeSflJfflt***^ (*©2) 

St\ -Ay^a-WHkjefeSl 1 3 fc«fc D 7 ICA V '>a HftH A S H S 

*bT, 1 14fe7>^i:|ltS$»§, £ 

a.— !ma##Jfc*.TV**AX«7— F (01*. fi, " Pooh 9 3" ) & 
XJ3-t2> 0 Ay>aH»HASHt»«lS £ 3.—!f ©AX 17— F^A* 
fc&AX«7— FBBE'x-^&jfcSl 1 5ttA*7— FBK^— ^H§4^t 
5. A°xy-H^iiE^-^H«, 0ij;tk£> H = H A S H (S II P o o h 9 3 II 
ID (U) II ID (S) ) mo dq(Cj;Dth#T#§„ ID (U) <h 

ID (S) if £+J— AO I D£^r o /U7- F^SE^— ^H 

tSJ^fLT, ^£lC®&T3i&M^&3o :x-1f©^5f^g©FWl;:&<5^ 
^EU 1 2fJAy>aMt»4il 1 3 £fB$&ttf8£» 1 14^e»^^$tlfe 
Ay v-zLg|£fcHASH<h$^ffiS££— HSfcP' = (S, HASH) £bT|B 

(7) «(Ha»c58^»*f«ffl-rs»^ <*©n 

Sf, iS^HaiR^^Sl 1 6ldJ;D^>^A(C«SLii:PicPRNG^^^ 
tS.^bT^flMf 1 1 7 fc^>^Afc:$&^aS£5S£T<5» uCT, 
*f»£#J&*j**.T^SAX'7--F " Pooh 9 3") ^XtfT 



WO 2005/041474 PCT/JP2004/0 15184 

16 

&o mmL^kmwL p r n g tm^m. s t^.— if <jd a*x h^a^j 2 nfc © £ 

"T^o /U7- HMSEX — ^Hte\ -gfa^Lff, H=h PRNG(SlPooh93DlD(U) I ID (8)) 

mo d piC^Dff^Tf^^c ID (U) b. I D (S) tt^tl^n^- 

I 1 6 1 1 7^Sfi!£$1*fc^&milifcPRNG£S^ltt 
S£&— JfcfcP* = (S, PRNG) tbTHEtfcbTfiarT*.- 

(8) mM8L&&&»&mmt&m'£ ^02) 

wz, m4&mmi>T, mm%L$k5££.m&mmTz>m& (^-©2) \z-z>^x 

M3L^£^ 1 1 6tC«t?)7>^AtC^iL^Cll^PRNG§^ 

■ 

n.-ebT,^i^i 1 7 fe^>^Aic^Ms^^-r^o z\z.*v. 

n.-if«g^^^.TV^/1xy- H (0»J;U;£> " Pooh9 3" ) £A#T 
§0 ^SL^MicPRNGi^fflS<hrL-if©A 0 X7--H^A^$nfc<D& 

t5. HISSED- ^Hfciu H = P R N G (S II Pooh 9 3 

II ID (U) II ID (S) ) modaiCj;0^-e#^. CCT, ID (U) 
£ID (S) t«n^n^L-1f A*© I D^tc AX 7 — FUSE?*— 9 

mt=L-.^mmz^—A\zmvrz. v . ifei#Lfco, &z>wzmm~cm 

^t'Jl 2 }*|£^SJfe^£Sg 1 1 6 1 7fr*>m±tS^fcM 

m&§kM&iPRNGtwmmst&—ffii l zp'.= cs, prng) tvxmm 
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(i) ^m^mrnvtcm^ (^©i^©2) 
p' (x) &m&-m-?o m&$&3 2^^^u i 2^6wufe#^p' <t 

n.-1f ^A* Lfc/U 7- F td: 13 P = p (x) ^W-Vxmtlt^.mXU. 
p (x) =p' (x) +P o o h 9 3 = a x • x + P o o h 9 3mo d q tCJ: 

3 Sfccfc^TIMiSi^&SfcRi^eY!^ Y,= g R1 • h _p (1) mo d p \Z 
J:0th#-r§ o cJlTp (1) U< p (1) = p' (1) +Pooh93=a 
i • 1 +P o o h 9 3 mo d q fc£ *9 th^T d r 1 j AcDi^J 

iod^-To mmmmu3 sttY^*- ^2^mmv. u— /t2^e>Y 2 £ 

£«r*. 7X^-iM3 6fc«8'&«3 23^6ta*$n5Ptil»5l4S 
3 3^e>m^^n§Rii^ftb^:Y 2 «rA^ibTMK^, MK= (Y.-h" 
p(1) ) R1 modplCckOtltTIUAtSo 

^^T^SE^^J©fgP3 7tt, MK§AA £ LT, V, = HAS.H ( 0 0 II 
Y, II Y 2 II MK) £<k0 V,SttJFUTi:0Vi&3«&&aB3 5 fc 7t 
2^2HBU U— /12j&*&Mb&Va£HASH ( 0 1 II Y i II Y 2 II MK) 
SrJt^'r^o E HASHI^[RlA>y>'aitTS5l/, HASHOf^ 

t5 1) fcMA C (Message Authentication Code) 

JfelC, SaSEI@m^J9r%3 7fc*^TV,tHASH (0 1 II Yi II Y 2 II MK) 
St*??**. iH^»3 7fc^^TV 2 iHASH (0 1 II 

y, ii y 2 ii mk) &—wtLrcM&\$v—rt2&miktemmi2VTmm.isX'ky 

a 3 9 tt, S K = H A S H ( 1 1 || Y, II Y 2 II MK) JC J: X) -fey 



WO 2005/041474 

->3 >iSK^t5„ 



18 



PCT/JP2004/015184 



(2) zs3LM%t&mmi>t£m& (foi^®2) 

"^aMSkP* = (p' (x) , HASH) &m&mTo ^§§3 2«^^EU1 

2A}*>m&mvr£&m3:i>' (x) 7 ^>aMtH a s h ta-^A* t 

fc/^y-Fld^D P = p (x) *fH|£UTffi#*rs. p' (x) *t 

l^C#^<D«-&> p (x) =p ' (x) +HASH (P o o h 9 3 II I D (U) 
II ID (S) ) = ax • x+HASH (P o o h 9 3 II ID (U) II ID (S) ) 
mo dNlC£9ih#T3o VX^if|^§§ 3 4 te, 3 2 frZAJj-ZtlfeP 

ia#5B&«3 3 iC^V^T^^-tirfeSLicRii^&Yx^, Y 1 =g R1 -h- D<1> 
mo d p(CJ:DtP^T-5o ££Tp (1) p (1) =p' (1) +HAS 
H (P o o h 9 3 II ID (U) II ID (S) ) = a l • 1 +HASH (Poo 
h 9 3 II I D (U) II I D (S) ) mo dNfc«k?)tH!Cr<5. p' (1) 

«p' (x) TxoftfrfpK: r i j xnxmw-vrcm^^^o mmmm^3 5 

Y x A* 2 ^stfa b > U— A2fr£Y 2 £^frr&o ^X^HH^SI 3 

6 ^ss^s 3 2^&ai7j$n§PiatM^3 3^e,di*$n5R 1 ^f 

lfeY 2 $A*tbTMK$, MK^= (Y 2 • h" p <u ) R1 mod pfcckDfh^ 
bTUJ7Jt5. 

n^#^©«^-> i^32tt#®Sp' (x) tAyi/aitHASHt 

3.*-if*tA*bfc/txy-Hfcckt)P = p (x) &9HFbTffi*-r«.^A«, 
p (x) =p * (x) +HASH (P o o h 9 3 II ID (U) II ID (S) ) 
modNI;<k?3tl'It5. TX^iW^§ff34«, 3 2 #>e>A*r£n7cP 

tSL^^3 Sfc^^T^^-^fegLicR^^^Y!^, Y 1 =g R1 -h- D<,> 
mod pfc^Dth^T^o ^CTp (i) p (i) =p' (i) +HAS 
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H (P o o h 9 3 II ID (U) II ID (S) ) mo dNilJ:DtHt§« £ £ 
T> p' (i) \t i #B<D-y— mzttVTv' (x) T x ©ftfc> 9 Id rij A 
nxH-fLfdlt^§. i!fi#lSIg|$3 5teYi£+J— A^^lfU U-A 2 

SL$Cfg£§§3 3^e>m^$n^R 1 i:gfibfeY 2 ^A^^bTMK^, MK = 
(Y 2 • h" p ">) R1 mo d pJcfcDth^bTtB^-r^. 
ic^TMSE^^Jifl$3 7 tt, MKSA^J^bT, V, = HASH (0 0 II 
Yx II Y 2 II MK) IZ&OVi&mg-VTZKDV ,«lfittlfl!3 5 fc«kD-tf— A* 
2^MfBU D-A'2)!i^gilfcV 2 (!:HASH (0 1 II Y x II Y 2 II MK) 
£J£i|£rr£o HASH H-^IrI A y ilct^ § L , HASHOft 

t>K>\ZMAC (Message Authentication Code) 

friz. mmB%zWmU3 i ic&iatv^hash (o i 11 y x ii y 2 ii mk) 

li^4«lrt§. — KKItftfllllrff 3 7ll*^TV 2 iHASH ( 0 1 II 
Y i II Y 2 II MK) &UfeM'&fe-yr-rt2&IEmf3:mmhVxmmVT±y 
>> a 3 9 «, S K = HA S H ( 1 1 II Y , II Y 2 II MK) fc<fc 0 ± y 

(3) /\yz/*.Mik&mmi>r£M& (^01^02) 
fflbfe^ (^02) ^ntoe»T^©«fc^fc»^-r^o 

->cl.W$CP' = (S, HASH) ^^tB-To ^2£3 2te^ ; &U 1 2fr*>m 
#fflbfcffc?&ttS t/\y is a.MmiH ASH £3.— At! Vfr^TsV- Kfc 
J;DP = p§t|-IbTtB7Jt§. flIAfcr, pte\ p=HASH (SllPooh 
9 3 II I D (U) II I D (S) ) modqia^tl'm. ^X^IH^3 4 
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i^^Y,^ Y,= g R1 • h- p mo d pfc^Dff^T&o SI MSB 3 5 fct, 
Y,£l*— A2^j£{§U +h- /t2jft>6Y,*2fll*r<5. 7X^-«4|JS3 6 
fcMfr&S3 2*>&W#;£n*P£ft»*£»3 3 £> ffi2j$*l3 R , £^f§b 
fcY 2 ^ilTMK$, MK= (Y 2 -h' p ) R1 m o d p fed; 0 IT 

SRV>TRBEil8*¥U»rfi&3 7 MK^A^J b. IT, V 1 .= HASH (0 0 II 
Yi II Y 2 II MK) £<fcD V r&stWlsTZKDV ^mmmmffiS 5 tC<fc D i^— A* 
2^ML, t-A*2^SMtfeV 2 <hHASH (0 1 II Y x II Y 2 II MK) 

fc> D CMA C (Message Authentication Code) 

friz. mmm%:mm^3 7i:*^tv 2 ^hash (o i 11 y x ii y 2 ii mk) 

U&UCfcfcfflfcrr*. £frl£gttT> l7-»4*3.8ttX5-ft»4l/T 
ffil^tlrtS. — RtE8gJMHJ»r8B 3 7 C^TVatHASH (0 1 II 

y , ii y 2 ii mk) wtvrcm&te-y---n2&iEmt3imwtVTmmi'T±:y 

a >H4^ 3 9 S K = H A S H ( 1 1 || Y , II Y 2 II MK) \Z J: D iz: y 

(4) mm^m^.m^mmvrcm^ (^©1^^-002) 

»4H&*W»&?Ufflb&*'&«, xl— if ©iflflcS* 1 KHi&fc^U 1 2fc 

fi**n&Av ^aWtH A SHOf^t) fc^K&£ScB3$CP RN G 
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&&wmhitM<& (foi) > (^<z)i) , 

3B£S4 2 *i 5»i S tfca»R 2 SA* t UTY,&," Y 2 =g RZ • Hmo d 

p f c <£ d ti-^r s 0 ifMsms 4 4 th^bT#e>n^Y 2 ^^^mi 

X^lt£j&2g4 5 fi^U 4 1 ^£^mbfcH£SL$Cf££g§4 2^e>(JDR 2 
<*: Sf§#lSI SB 4 4^5©YiSA^tl/TMK^, MK= (Y,«H) R2 mo d 

j»V^T»kiie*2RI»faiJ4 6te> MK^tbT, V 2 = HASH (0 1 II 
Y, II Y 2 II MK) \Z£Q V 2 &fh^LbTCl©V 2 &a^Ma^4 4\Z&Z>M3zm 
Sl^MfSU S^gll^SffibfeV^HASH (0 0 II Y i II Y 2 II M 

* 

K) £Jt$SrTSo ei^-t 8 , HASHtt-^A>r>aitt^U HASH 
<Dftt> K) fCM A C (Message Authentication Cod 
e) £4£oTfcJ:^„ 

#Cfc,.R8E*g**!l»r8B4 eC^^TV^HASH (0 0 II Yi II Y, II MK) 
^ — ft Lfc RSIiA i N»rffi4 6 fct, X^-f££gg4 7 IT, — % 

MSSr4«iff§o — RflEfMt*ltfffi4 6IC*^TV,tHASH (0 0 II 

Yi ii y 2 ii mk) &—wtvrzm&}zmmmmi&]E^temwi:VTmm.vT± 

*;'>H>i4US4 8tt, S K = H A S H ( 1 1 II Y i II Y 2 II MK) \Z «fc 0 ± 
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(2) ^m^mmvrcm^ (^©2) , ^^t/s^^^m^mrnvrcm 
vrcm-et (^©2) 

U— A*2«, B&^bfe^^fljfflbfe*^ (-e©2) , #^^A^^zLi8 

*^«4 2^£,3§££ii:fc&&R 2 £A;fc£bTY 2 £, Y 2 =g R2 • h H mo d 

***£j*»4 Stt^U 4 l*>&S^ffibfcH 4 2^£><£>R 2 

tilflMSSM 4^S><DY 1 £A#£bTMK2r, MK= (Yx-h") R2 mo 

«*ViT88Ktt* i l E !l»f9J4 6«> MK^AAiUT, V 2 = HASH (0 1 II 

y> ii y 2 ii mk) \z£Q v z&m&vTz.<Dv 2 &mm$&m : m4 4iz&vi&mm 

Wl^mmis, ^gll^S^ilfcV^HASH (0 0 II Yi II Y 2 II M 
K) &it1&"?Z>o HASHfct— 2n3lAy5/3.H»T?**U HASH 

<Dftfr> 0 \ZMA C (Message Authentication Cod 
e) &m~?T%<k^o 

■ 

BIEIftJMQBrflU 6 l:*^TV,tHASH (0 0 II Y, II Y 2 II MK) 

^IS^cf^fr^o — ZS\ ^ffiE^m*Jg»f^4 6 fc*HTV,iH'ASH (0 0 II 
Y t II Y 2 II MK) 3^— &bfc»^tt«H5|5^«i*«iES«:»«i:bTRaEbT-fe 
>r>3>iM4 8li SK = HASH ( 1 1 II Y , II Y 2 II MK) \Z.& D ir 
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§o H^bMaw:, ^m^m^i 3ic«fc^#^T' ta- tf ®s*gt i 

m& oe©i) , ^^tAy^aMisk^fiiffibfe*^" (^©2) \zmm-rz> 
(i) &mj£&mm sterns (^-©n 

V 

®#>\z. @9§#iit, ^m^mmvrcm^ (-e©i) oa*gt i cd 

ilfcU-A©t^fcofc&xMtt§ (t' (x) =j8 

i- xmodq) A©£fctft n Mfco & n (t ' (x) =j3, • 

x + j8 2 • x 2 + • • • + £„ • x"mo d q) £^3rT5o Z\ZL~e, $\$ (Z / 

q z) •j5>e»^^te:atarns. — o©+h-n©*j-s\ t' = t * (x) 

t ' . (x) =3 i • xmo d q<h&£o £ £T\ 3— if ©^5NSfi 1 klfflf 

^fc/tu i 2^e»tBit^nfe#^p • = p ' ( x ) &m&tti-?o t * 

(x) i:#^p' (x) *«A*Snfc63g«ffi^»l 4tt, 3.— tf##ffl 

©jgff$nfe#^p' tit-AHifffl©iiH' s^t*. zzmisnrcgrJM 

5*P' fcJU ^fcfP' = t * (x) +p* (x) = (0,+ jS,) • xmod 
qte«fcDf|-jre#£. -9— /tMffffl©ffiH* , =h 1 ' <u modp 

{C^kDIt^T^^o t' (1) «t' (x) Tx©f^fc>f9^U— A© 

ID <09*.«, r l j ) A*lTif-^LfcMT&§o AJ€trffl©^H* ten. 
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(2) '&m&&mmvitm& (^©2) 

! • xmo d q) U— AcD^nfitffo £ n^^t'iS ( t ' (x) = j3,- 
x + j3 2 • x 2 + • • • + j3 n • x n mo d q) ^m^Zo /3 tt (Z/ 

q Z) ^^i^CI^nS, -OOt-AOl^, T' = t ' (x) 

fcJU t' (x) =j3 t • xmodqt^:§. Jl^^ ^.-fC^if lief 

xrc^^u i 2^e>i3it$n^:^s:p' = p ' (x) ^M^ttm t • 

(x) t#3t:£p' (x) #*A# $ n& £ 35Sffilt£j5fcS8l 4tt, 

5£P.' «*«P' = t ' (x) +p* (x) = (a,+ j5,) • xmod 
qfci;Dtf^T^-5o AJEfrfflOMH' , M;tfc£H' = t' (1) mo 
d qicj;t)th^"e#^ 0 t' (l)tet' (x) T x <Z)fSfc> tHc:+f— 

n©ID (fcl&fcT, Tij ) Anxth^bfefiiT^^p AMfrfflOliH' 

^^i*i/T, &±izm%i'T2>i&^&$>z>o =L—i?<D%it3imw(DnBiz$>z>* 

t'J 1 2«Mif$tlfe#^P' = t' (x) +p' (x) £f21tbT^# 

(3) #^£Ay5/:xW»:&?lJfflbfc«<& (^©1) 
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ttfc1f-A'W-Ofcofcf>x^ttt5 l^iC ( t ' (x) =0 
, • xmo dN) ^—^(D^tnmrc^rc^n^m^ ( t ' (x) =j3, • 
x + /3 2 • x 2 + • • ■+j3„'x"raodN) Z> 0 Z. Z.~lz^ 0 (Z/ 

q Z) *^£>$SfE:&K:Mfe£ft&o 0i)7Lfc£, — 'ZXD'^r — /tWi'p, T' = t ' (x) 
fei> t' (x) =e,-xmodNi^S. a.— tf <£»3§5fc^M 1 Jcflt 
^.fe^^eu 1 2^^f3m$tife#^<i:Ay^3.M^:P' = (p' (x) , 
HASH) fctt^ffi-T. &mj£t' (x) £#5t5£p* (x) !^A#£nfc£ 

«h; s^ts, Hff$n^#^p' mzi&p' = t* (x) + P ' 

(x) = (c^+A j) • xmodNfc«fc!3H-|[T't5 0 l^—ASirfflGDMH ' , 
fllfcfcrH* =h r a) modp(CJ;59tf^T#^o t' (1) ttt' 

(x) TxOftfrDte: r l j *AtlTtH!£UfcffiT?*«. 

- A' KELT'S— ASfr/BaHtH' 1J— ;t5E«fffl©fflH' fcJU 011 

jtfcfH' =h , ' (n modpl: { kOtHTf§. u^T, t' (i) ten## 

(x) txO^DC r i j §AtlTIHb^it$§, 

^*^e©^^^^^^EU 1 2«Mf Stlfc^^P* = t' (x)+p' 
(x) ij*^EU 1 2^e»fg^tBb7cAy ->^MmHASH<h§— ^ICP' = 
<f (x) +p' (x) , HASH) <hbT|31tbT^#-r§o 

^b^:+)— A'(D^C/i)t— ofcofcS x ^^iT^ I&^HjS (f (x) =/8 
, • xmo dN) +f— A©^ni@7^o^:e»n^#^ ( t ' (x) =j3,- 
x + /3 2 • x 2 + • • •+j8 n -x n modN) £fg£-T<5o £ j8 (Z/ 
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q z) •a>sasfts*fcs tarns. w^wr, -^otwtoi^ t* = t • (x) 

»4, t' (x) =3 i • xmo dN£&3 0 CCT, n.—* »f ©JSsfeSS 1 Kilt 
Afc^^EU 1 2^&l3«$nfc^^tAy^3.M»:P* = (p' (x) , 

hash) ^M^m-r. ^^t* ( X ) <t#^ P ' ( x ) ifixtiisnitz 

ffiH' S4lSt«. Sff$nfe#^P' tt, fllfctfP' = t' (x) +p' 

■c 

(x) = (a, + j3,) • xmo d Nte:<k 9 fff-^T#S. A^Hr/BOffiH' , 
0ij;U£H' = t ' (l) modNI:J:f)ttlTf§. t' (l) fc* 

t '. (x) 7?x©f^^)J9i3 r l j SrAnxm-^bfeffiT^So 

fcfcfH' = t ' (i) modNtckOtHTt^o t ' (i) tenjfc 

^5£t' (x) Tx©ft:bDte: r i j £AnTfh#Lfc4irr&s. 

i^— A*Mfrffl©{fiH' te:x— tffimmz*)— Afcj^LfcD, SHrx?2l#bfc 

wzmmm<Dfamz&z>**:v 1 2\tMm^nrc0m^p' = t* ( X ) +p* 

(x) t^t'J 1 2*^i^tt}tfcA<r>a«HASHi$-ii:P' = 
(t' (x) +p' (x) , HASH) tVTmmVTUftTZo 

& (-€•£> 1) 

4 l^S^^mL^AX^-H^iE^-^H^A^^n^&jgffii 
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2 1 U— A&#JB©M§T$*l£:AX >7- H^iE^-^H^^TSo 
H§r£nfcA°X7- FIS1IE^--^HK*, 0U;Stfc£H = h p(1) • h t- (1 > = h p(1) 
+ t ' (1, modpl:<fc!)tItf§. -9— AOftmzfoZ *=EV 4 ltejOf^n 

■ 

(2) ^m^mmvr^m^ (*c2) 

EllO£#fl8bT> M^bfc#^£fijfflbfc^l£- (^©2) ©U— 

liE^-^ H ^l^ffit. a.— If ©«&5fcg«j&> e> m 6 nfc"-9— ;tje«f ffl OIH ' 

£j&Sg2 lfcju U— A##ffi©Sff^n^A°xy>-HMIiE^-^H^^-rSo 
Htf^nfe/tXtf-FBtt?*— *Htt, 0JJ;tte£H = p (1) + t' (Dm 
o dq(IiDff-fT"t5. U— A©F*3^fc^S^^:U 4 1 tMfr^nfcAT. 7 

(3) ^Jgi t A y ->aH»:?&3pJffl bfc*^ (^©2) 

©2) ©-9— A2©M$HbMS©lfrfl2£iBS!rr§. 

-9— A 2 lC#3_£:^U 4 1 If I Di/U7-Hi 

ISE^- ^ H <Sr^#.fcbi- 0 if ol^SI^ £>M£ n&1*— AJEfrffi ©IH * 

4 l^^^^-mb^AXy-H^iE^-^H^A^^n^^MfTffi 

^^2 its, v-n&&m<D^mzntcrtxv—PMm7 £ ~-?H&tkm-rz>o 

Hff$nfeAX»7-H^SE^-^H«, M*fcfH = p (1) +t' (Dm 
</U7- ^©35«f- 2> 
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n, h' -9— A*2^t«$n> 35«f$nfep' ft./€'ji2^#t 
©i) > jsiHaft^^gsfUfflb^*^ (^©2) \zmm~?z> htmm-?$> 

2) > ^tAyi/aPiSMtm (^<E> 1 ) , #ISiAr>all 



(1) Ay>aHft*f(|ffl'bfci^ <*©1) 

mm i ©H«fit:«is©»f^*Kwr*. 

3.— if <Z>Sg5fcgg 1 U 1 2^e>|B'!!i$t^^:P , = (S, HASH) 

StK^ffl-r. 3— 1f#tl;;LT^3§rL^AX«7 — H (PW ) fcAyS^a 

rig-rs. -y— A^frffloAxy-H^iiE^-^H' #i;tfc£H' =h HASH(s> 

ifw d.d(u) iiD(s>) mo d ptc^Offh^T^^o ClilT, I D (U) t ID (S) 
«^-tl^n3-lf i+h— AO I D&mTo U— ASSt^A*?— KBKr- 
#H' tt3.—« if*«it»lc-y— A*2fCtbfcD, ifTMUfcO, fcSWS* 
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ttfcfcS^U 1 2}«ff$nfcP' = (S' , HASH) £f3itLT^#T 

01 1 $#ILT> A-/->3.||icSrfiJ^b7£^-a- (^"©2) Offing 
n-lf <7)^5K^g 1 fcfflf^tfc^^EU 1 2^S»IBti$tlfeP' = (S, HASH) 

£^ffi-To a.— 1?&%XT\f*2>mv^Kxy— H (PW ) tAy>aHft 
HASHEMIS' )5U^$nfc&/U7- HfBaET*"— ^Mff§§l 6 :x 

^-AMfrfflOA^y-HMSE^-^H' #l;tfc£H' =HASH 
(S* II PW II ID (U) II ID (S) ) modqtJ;!3t|-I^5. 

id (u) 1 1 d (s) «^-n-?nrL— tftif— a© i d&^t 0 +j— a 
HfrffloA^y-FfgSE^-^H' tea.— a 2 te*bfct>, us 

&o o.-if©^sai ©f^^jcs^^^u 1 2«i€ir^n^:P' = (s' , 

HASH) ^rfB1tbT##T-5 0 
i§-& (^©2) 

fcAy v^WifcH A S H<Dttt> D IcHiKSLifcWifcP R NGSffl^SMIi A 
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mvtcm& (^02) 

9 

■ 

fiUHSLftfg^SSfdffibfcW-a' (-^<Z>2) ©1*— A2©IlrMlfi!)i^§^ 
§^t*§o1^-n2«,tu5z&b^:A-/^^l5^:&fiJfflbfe^(^© 1 ^©2), 
MSLic^^^frJfflbfe^ (^01^©2) KWfc> 5 fc»fts 

^f, If—A 2 4 1 \zGm%Wt3L—1? I Dt/U7-m 

se^-^ h ^M^tBTo ©*5feg« i ^ e> £i s n^i*— njgffffl ©ax 

A*$n^e>AX'7-H^iiE5 i -^Hif^2 2«, ^-A'§#ffl©/U7- H 
g&fc&S^D 4 1 ^Hff^tlfeAXy— h*^SE^— ^H = H' &ia«UT« 

<!2ilf!|> 

^W^M^Ttt, £tg§«£ (PubK) *|«k£#§fc?&«i (P r i K) (P 
ubK, PriK) ^MltttMTtt^ < , iTfeiSIt^T 

Bf-^tef*, «§ffl^t^>yt-^m^C = Enc PlIbK (m) 

fr, m = Dec PrIK (C) tt^flliT^S. Ifc-^fcWU &BMt£fflV>T« 
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ig Pr , K (m) £1&Z>&otz.m&$: (m, s) &§z&t Z> £ £*>n<mT&£o 
W^35:(D^|iE«, ^PSIt&ffiV^T> m' =Ve r PubK (s) mim' 

(m, s) ^iEUVi^ t^^SEi-^o ^5WUi^(l (m, s) J^IEL 

5:1? fete V* £ <h & £ . 
^»ORS A'jkfflmtt-C}*, 'jkMmte (N, e) l&^Hfc* (N, 

8re&D Or&fr^ N=p- q) , ete, e £ (p-1) • (q-1) (DM 

+ 1) T&D, dfei, e^mod ( (p-1) • (q-1) ) ~C&Z> 0 
ZMMk? ZiZfe, p Lq&mVMZlzT %> 0 *y±— >*m (meZ N *) 
bTBf^bM^:^ Enc PubK (m) =m e modNT*D, U^fcMmt. 
D e c PrlK (C) =C d modNT$5, Bf-flOfcC £&H§H (N, e) 

jfifctt, S i g Pr 1K (m) =m d modNTfeD, tfcSHfcMitfcJu Ve r PubK 
(s) = s e mo dNT^S, — jftfc, iM-S'X^ATteu ^(D^£tt<DI/^ 
;U^|S^-r§^14A^^-^^Wr§o ^JITkJu A : r>altHASHO 

t^"T^) > RS A^Hi^O^MA'7^-^itT 1 
RSA©WS$n?S§tI^n, Sfc, {0, l} + «WI&(D25igc 

©xhu>^©i^$, {0, 1 } k «s$k©2ii^:©x h y >^<£>^-&£ 

^f. A^r>altHASH(j: {0, 1} *<DXJ]frt> {0, 1} k C9ffi#£tH 
TSfe^fc:— ^IpJM&T&D, FDH (Full-Domain Hash) H 
m*{0, 1} *©A*^&Z N *\ { 1 } ©{U^^ffit^- #[rJ§5^T& 

5. II (concatenation) £V>51c9fcT& 
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<mmmw<DWMfc> 

(1) #^tFDHilt§fiJlt§^ (^©1) 

01 3£#figbT, ^^£FDHII*&f!lffl"rs»'& (fOl) 

^-r^if-Ao^t-^^iofe^x^^^-r^ i#^5£ (p' (x) 

= o, • xmodN) if— A(D$t#*n<0;£ofc£n#:#3i5£ <p" (x) 
= a i • x + a 2 • x 2 + • • • + a„ • x"modN) SrS^^T 31 at 

ttz M *j^6#iff*icatfn*. mx.i£* —ow—nom^. p' (x) 

p' (x) =a 1 'xmodNtW. EC*?, a— !f fctg#J&*^*.Tl^5 A 

" Pooh 9 3") £A#T3o £FDHH$c£ol 

(1) = p ' (1) +Pooh9 3modNl; < kf)ll > f , et§. d^T, p' 
(1) fctp' (x) Tx©ftt>DfcU-noiD (#l;Lfc£> r l j ) £A*IT 

Snfc^ip' (x) t F D HH»»4S^ 6»4Snfc F D HW»S:F D H 
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*gfcP* = (p' (x) , FDH) tVXmWiVXUWT^o 

(2) &m&.iiFDHM®;&mm~?z>m& vt<o2) 

mz. mi 3&#fibTv ^m^.tFDHm^mm't^m^ (-e©2) £ 

£ e -ebx, &m&m&^i 2 3\z&v)7>&&\zg>mttm£.Tz>o z\<Dt 
^-r^tf— n©ic^— ->fcofee>x^^<i:-r^ (p' (x) 

= «,-xmodN) it— n<DWLifinmtz.^fribn&.&-m& (p' (x) 
= at i • x + a 2 • x 2 + • • • + a „ • x n mo d N) Sr^^T-So Jlcl~C, a 

»z N *^e>^^{-ii^n^>o #i?tfe£, — -zxD-yr— Kom-et. p' (x) 

p' (x) =« 1 -xmodN^§ 0 CUIT, =L— J *f\Z&ftJ)m?LT^Z>/^ 

(W*fc£, " Pooh 9 3") £A#T3o #SSi:FDHitia 

(1) =p' (1) +FDH (Pooh93 II ID (U) II ID (S) ) mo 

dNiz^vmn-c^^o z\z\x*. id (u) tiD (s) «^n^n^.-ifi 

if-/t0rD^to z\z\x-, p' (i) «p' (x) 7? x (Dttto D M r i j 

#l*.fc^ S»f *U— A*©t^n©I^ AX 7- HSUE?*— 1 2 

FKBE"5?— ^H«, #|;U3?H=p ( i ) =p ' ( i ) +FDH (P o o h 9 3 
II ID (U) II ID (S) ) mo dN&Cj;D&::iHrr#£o ID (U) 

£ID (S) »^n^tia- U*£ i #g<D1*— A© I DSrSTo p' 
(i) ten##3C5£p' (x) Tx0^fc?)(C r i j ^AnT^bfc^T^ 

AX y - H mWr- ? H «ZL-if^it^tcif- A «Lfcf3> SHUT! ittt b 
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(x) tFDHitM^e»M$nfcFDHiltFDHi:^-M(:P' = 
(p' (x) , FDH) tVTtmVTUftTZo 



Sf» FDHitM^l 2 5&Cj;9 7>^AfCFDHWf&FDH£f!!3rr 

£*-h<Z>ffi) o iT.^T% x.T^Z>K XV— F (fS^tf, "Po 

oh93") §A^tS. F DHMt iMfi S ti-lf ©/U 7- H^AA 

!&-?Z>o ^Xy—\*Mm7 £ —?H}Z, M%.U, H=FDH (S II Pooh93 
II I D (U) II ID (S) ) fc«fc?)fMr«*. Z\Z.X\ I D (U) t I D (S) 
te^fri^nn.— If <h+J— A© I D^^t* o FMWr— ^Htea— 

$&^M3§£ggl 2 6)d^fi4$tlfeMfiSiFDHitM^l 2 5^e» 
H£$ti;fcF DHHItFDHtS; — WlZP ' = (S, FDH) tbTIBULT 

u— nra* rs A^w^sro.— tftciiitbfc^Bt, ®Mikmm&ft5o if— 

3-—*?\zmm-§rz> 0 z.z\t, ®Mib\$. g^-urnm. ^xfefc^mmtsizx 
mMt%> z\ h-tfimmx $> %> o ^±x\xm^mm^\mt zm&xu, a— if 

zxm&mm-r&o -^-n^mrnvrc^mme t <p-n • (q- 

1) ©I^WIT Of&fct^ gcd (e, (p-l) • (q-1) ) 
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(1) &±fcmm&mm'rzm& 

S1\ R S Aii^g 2 3£J;9£MI (N, e) £3B$St (N, d) <Dft 

RSA&Wfc (N, e) teif-A^E^fc:i-if «3 > SB 

§o. D-A'C^fc^S^tU 4 l^R S Aff I (N, d) Srl31tbT^# 

w 

(2) Sfe^Tftt^VijUSSjpJffifS*^ 

(RxG {0, 1} k ) &»£U 1J— /tteaMTTS. — 1J-/t2}:fe§R 
S AH^§§2 4^J;D^^ii <N, e) Ml (N, d) (Dtt&g.m'tZo 

^LT, aHc»^«2 5fcJ:p9>^Afc:a»:R2 (R 2 e {o, 1} k ) £3§ 

S^TS. RSAf^^26ft S*ggl!d^ffbfcR,tRSAl 
M2 4^5^$nfciii (N, d) £3L8£B£#2 5 3&>£fg&£i2rfc 
SL#R 8 &A#£ LT, {m,} 1S]Sn (Df^ { s,} 1<Un *^t5 C&iEU 
nfctn^ 1 o g e (PW- (e - 1) /e) J; 5 ^S^CT^^o d^T, 

PWtt/U7-h*^to ) . {sj} 1SJS „«, { s ,=111/1110 dN} , 
sjsnfc^Dat^-r^o Cut, (mi) i SJ sn«HASH (n II N II e II ID (U) 
II ID (S) HRjlRi,) ©fcB#^£S$ 1 (D7Uytn£nm\Zft\-yx'&tz.% 
<D*V$>Z> 0 ID (U) tlD (S) ^tl^tia- if tit— A* <D I D^t„ 
U— /t2tt, (N, e) ttf LT#e>tlfclM (R 2 , {s,} 1SJJS 

„) fcjgurr*. D—n2<Dfamzmxrc* : ev 4 rsa 

i^2 4/!i^M$n»i (N, d) £fBitbT^#-r3o 
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a.— v?(Di&*m.m. i ^^mtm^nrn^ i 8 «> i 7 ic&^t 

5fi4StfcR,tU-n2^6SSbfc ( (N, e) , (R 2 , {s 
&A*il/T, f^t (R 2 , { s ,} i SJSS „) ©^HE^fT^o {m,= s J e mo 
dN} ^itJZ&K) {m,} i* JJS „£t|-J|tbTC© {nij} lsJSn <hHASH (n 
II N II e II ID (U) II I D (S) || R, II R 2 ) £Jt«rr*. &mWM%m& 
1 8 IC^T {mil issjssn £H A S H (n II N II e II ID (U) II I D (S) 

iiRiiiR 2 ) &—waste^m&. fcmB&mwiui sn*,. 17-^1 $\z 

sniHASH (n II N II e II ID (U) IIID(S) II Ri II R 2 ) ifi — WtVft 

m^n^—n 2 o^mm (n, e) ^jEmu^o^vx^rnvx, zL—*?<Dm 
mmmi<Dtem\zffi%.*i* : Ev 1 2 \z, okmm (n, e > &tBttbT«#-rs. 

;t 2 (0 5#Ri) t<DmxmMmmRzsm&m&noW}ft*wiW'tz>. 

(1) ^^.fcFDHM^^flJfflbfe^ (^r<Dl) 

^fetC, #^^FDHre^cSrflJJibfc^'g- (^-©1) ®«^SE 1 ©ftf^ 

HSHftP* = (p' (x) , FDH) Si^fflt. 2«^^EU 1 2^ 

6^^tt}b7t#^S:p * (x) £ F D H MUfc FDHd: o. — if^A^J V A° X "7 
— Fldcfc t)W=FDH (p (x) II ID (U) II ID (S) ) £ iHI b T ffi 
t§. £ £T\ p(x)=p' (x)+Pooh93mo d N \Z <fc K> WrW-~$~ Z> 0 

P' (X) #1&^5£©«£\ P.(X) =p (1) = P ' (1) + 

Pooh93 = Oi- l+Pooh9 3modNl:J;l9t|-It5. Z\Z\X, p' 
(1) tep' (x) Tx(Oftfc>0£ r l j AtlTSWUfcltT?**. 

a.— *?<Dffi3zmmi \zffiz.fc*=EV i 2^^i^aibfcMSp' (x) a* 

n^^©«^, i^5 2»^p' (x) iFDHMtFOH^- 
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1f^A^UfeA 0 X«7-HfcckDW=FDH (p (x) II I D (U) II I D (S) ) 
^WVxmiJ'f^o p (x) =p' (x) +Pooh93modN 

t^f)t|-It§. 0!l;U3u p (x) =p (i) =p' (i) +Pooh93m 
odNiaDtft^.^^p' (i)«i#S©U— ;tfc»UTp' (x) 

T?x<£>fU?D K: r i j AtiTH*#bfefflTa&^o 

*?7,t7mW&5 4tt, J^U 1 2^e»i^ail/fc^lli <N, e) tilS^S 
T (Tg Z H *) i*^Z$, Z = T e -WmodN(:j:!3IHt5. ilfi^M 

T, HASH (0 1 II T II ID (U) II ID (S) ) 2rffH?LT+>— A* 2 £ 
BRfE£h&$|grffi 5 6 ^^TV 2 iHASH(0 1 II T II I D (U) II I D (S ) ) 

4M£4 , Hrr£o — 2r, g88E«r$«IBrffi 5 6(Cfe^TV 2 tHASH (0 1 II 
Til ID (U) II ID (S) ) 3^-»bfc«-&ttU— A2d«jES«:S«fcbT 
mmVX, &iE^3i/&g§5 8 fcJU Vx = HASH ( 0 0 II T II I D (U) II I 
D (S) ) \Z&Q&LUTV i&mWVT*}— /t 2 Alft £ 0 HgPtlc, •feyv' 
3 >§S£/&3§5 9fc£, S K = HA S H (1 1 II T II I D (U) II ID (S) ) 

(2) &m&hFDHmm.&mmvfrm& (^02) 

3.— If CD*B*8« 1 fcfllAfc^t'J 1 2#>S>fB1i$*l£:#^5$£FD 
H^tP' = (p' (x) , FDH) ^i^tBt. ^5 2tt/t'J12^ 
eMbfc^p' (x) tFDHitFDHia- ^AAlfc/U7 

— KtCck 0 w= fdh (p (x) 11 id (u> 11 id (s) ) ^mnvxmti 
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-T&o Z.Z\X% p (x) =p' (x) +FDH (P o oh 9 3 II ID (U) II 
ID (S) ) modNCcfcOH-ftS, mXU, p' (x) #c#3|£©» 

£\ p (x) =p (1) =p' (1) +FDH (Pooh93 II ID (U) II 
ID (S) ) • 1+FDH (Pooh93 II ID (U) II ID (S) ) 

m o d N J; D if^f p' (l)tep' (x) Tx <Dftt> V \Z r 1 J 

a.— fcffif^tfc^^EU 1 2^e>fc^tBbfe#^p' (x) ^ 
n##3t5£©*§<£, i^S5 2li^p' (x) tFDHItFDHii- 
1»A#L;fcA e X7-Ffc«J;0W=FDH (p (x) II I D (U) IIID(S)) 
^WrMhxmtl't^o Z\Z\X. p (x) =p' (x) +FDH (Pooh9 3 
II ID (U) II ID (S) ) mo dNfccfc Off-irrSo P (x) =p 

(i) =p' (i) +FDH (Pooh93 II ID (U) II ID (S) ) mo 
d N \Z & V Z> <> p' ( i ) « immo-V— ;»ltp' (x) 

TX*?ftJM&5 4fct, ^^Un^^ffitfc^li (N, e) 
5 2^SA#£nfcW<>:gL$cfi§£§§5 3 fc43^T^>yAfc^£i*fcgL$: 
T (TGZ N *) t)5^Z^ Z=T e -WmodNtc);f)tIt§. MfsflM 

T\ HASH (0 1 II T II I D (U) II ID (S) ) £fH?ELT1*— A 2 S> 

SSSElS^J^ri: 5 6 t^TV 2 tHASH(0 1 II T II I D (U) II I D (S)) 
3&«— igSEM^MBB 5 6 fcfc, X7~^5 7l^bT, — 

M3S^4»lfr^o — Bffi*S**IWfS5 5 6.fc*ViTV a ^HASH (0 1 II 
Til ID (U) II ID (S) ) &-~%LVfrM&\*°yr--A2&jEm?3immtVT 
SSSELT, ttK-?£j&3&5 8 te> V, = HASH ( 0 0 II T II I D (U) II I 

d cs) ) \z&r>ikm¥v l &wr9f.\sX'V—rt2'^mm'rzo mm\z* 

3 >it*J«»5 9te> S K = H A S H ( 1 1 || T II I D (U) II I D (S) ) 
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* 

(3) FDHw&&mmvitm& 

HMifcP' = (S, FDH) ^^^m-Tc «^S5 2fW : EU12^5fl||*a 
bfcl«lffl[StFDHHftFDHt3.-1f*«X*bfc/U7-KlC«tDW* 
§H¥bTtB**r So Wft, W=FDH (S II Po oh 9 3 II ID (U) 

II ID (S) ) fciBtNTTS. 77^11^5 411 ^€Ul2^St*ai 
bfe^Wli (N, e) ti^g5 2^&A*SnfcWtSL*5S^«5 3 Id&V* 
T9>yAfcl8^$ii-fca»T (Tez;) t*6Z*, Z=T e -Wmod 
Nte^DfUSfS. 31ffi«lSgP5 5ftZ*1J— A2^Slfllb, -th-/t 2 tf* S V 

ttV>T«»Era*¥!l»r8&5 6 ft, a»58^«5 3 fr&m^Sft&T&A* £: L 
T, HASH (0 1 II T II ID (U) II ID (S) ) ftfWbTlJ— /t 2^6 

fgSE^IH¥!j|£frSB 5 6 fc*UTV,tHASH(0 1 II T II I D (U) II I D ( S ) ) 
#-HRbfc*>*^ l81ft@&¥!l8r8IS5 6ft, 5 — » 

U&V^iSIJOt*. cnSJJJT, l5-»48 5 7ttl7-S*4l/T 
MSSr'f^'rSo — RKISJIIfUNfffi 5 6^^TV 2 iHASH (0 1 II 
Til ID (U) || ID (S) ) J&t-r&b 7t2^iES^gttbT 

4ftK?^A4S5 8 ft, V, = HASH ( 0 0 II T II I D (U) II I 
D (S) ) lCJ:DlftK^V 1 «:if-*LT , if— /t2^£Hrr£o H^lC, ty$/ 
a>tt*J«»5 9 ft, S K = HA S H ( 1 1 II T II I D (U) II I D (S ) ) 

(1) #^5££FDHg|£&£fiJJBL£:4§£- (^©1) , g-m^. £ F T> HMWt& 

mmi>tcm& (^©2) 
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£T> it- A*2 (Cfll^^^EU 4 1^5>^#$n^^L— if I Dt/U7-H 

fcHtftfi (N, d) iS*gg 1 6gi U & Z SA* t LTT T = 
(Z/W) d mo dNfd^D^bTtB^T^o CI £T\ Wfci, W=FDH (H 
II ID (U) II ID (S) ) fcckBfUTTS. iftBE^lftS-e 3 tt, T7^- 
tt£j$$6 2^e>A*$nfct^£^iiE^V 2 £> V 2 = HASH (0 1 II T II 
ID (U) II I D (S) ) &c£t)fh#-r£o jI##t3SS& 6 4 te, th^bT#e. 

tifc v 2 i ^mm v , *ffi3?&B i e, ^fs b ^ v x &RflEHJKf(iiff w 

JltLT, HASH (0 0 II T II ID (U) II ID (S) ) Z^M-VTiffi^m 

UfcVj tttmT&o £ HASH0ftt)Df:MAC^o 
TfcJ;^o iHie^|iJlfgB6 SJ^^TViiHASH ( 0 0 II T II I D (U) 
II ID (S) ) 3ftb3fe^»'&, BKiftfliS6 5fc3u X 7-56^*6 6 

ash (o o ii t ii i d (u) ii id cs) ) a*— m.vt£M&\zwtmmw 1 

iE^^^gibTMSEbT, iry^a >«4*S 6 7 S K = H A S H (1 
1 II Til ID (U) || ID (S) )• CiDt^v'a^SK^n. 

■ 

(2) FDHP§££fiJfflbfc*l# 

feHtMt (N, d) ^:#^t 1 * 5S§ Ufc Z SAA t bTT *, T = 
(Z/W) d mo dNiC^Oth^bTffl^-r^o Wfcfc, W=HTS5. 
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V 2 = HASH (0 1 II T II I D (U) II I D (S) ) fciDfMTr 5. 

& s &m l & v , zmm^mm g& 6 5 ^ m # r 5 . 

*tbt, HASH (0 0 II T II ID (U) II ID (S) ) £tM*bT«tfc£ 
W:l frZ^m V fcVxtttm-t 2>„ £ HASH<Dft:b«9 tMAC^fo 

T%>«fc^ 0 ggffi&ftttlBrffi 6 5 I^^TVjtHASH ( 0 0 II T II ID (U) 
II ID (S) ) ScL,&tr>»'&, ^fE^EIBrgB 6 5 fcJ\ X^-^£§§6 6 
IZMVT. — misted Z %o 2in*SW-T, I7-M^6 6lix 

ASH (0 0 II Til ID (U) II ID (S) ) ^-|[Ufei^f«*ggl^ 
lEiS&gtttLTIBIELT, "fe y v' a >H£/£g§ 6 7 fet, S K = H A S H (1 
1 II T II I D (U) HID (S) ) fc±D-fcy>g >tSK^^t§, 

■ 

*ff"5o ®9> 1911 a.— ^(Di$^mW<D^ffiikm&<Dffli&&m-$'7Uy?7 
& (^0 1) , #^:££FDHPI!&£fiJJBbfc*§£- (^©2) 

mmTz>m'&\zmm'?z>z.£i$p]m*v&& 0 mt^ z\ o^mtmrn £ <t o +f— 

/ttcM-T.S repla y «C**6&<C1 t**RltBT?»*. 

(1) #^£FDHW#&?!UBL&»'& (^-©1) , ^tFDHitS 
30J6(£, H9§#ItT, g>m5££F DHMmi* mmisTzm^ (^<D1) % 



WO 2005/041474 PCT/JP2004/015184 

42 

ftbfclt- ^©»#-^;Eofc&x££»:£?-3 l##5t5£ <f (x) =3 
i • xmodN) it— n©3fcj$*n<BjEo&5 n#^t5£ ( t ' (x) = j8 1 • 
x + /3 2 -x 2 +- • •+j3»-x"modN) £f§3rr#o ££T% j3teZ N * 

^si^fticatfns. fliAwr, — ^©it- nom^. T* = t * ( X ) 
t ' (x) =e,'xmo(iN^§. £ :t% 3-—*?<Dmmmmi\zffi7Lrc. 

1 2^e>WB^t$n^#^^:FDH|i^P , = (p' (x) , FDH) 
^^^■ffi-To #5f5£t' (x) £#^5£p' (x) ^A^^tlfeSMfrM^ 
^1411 rL-if##ffl©|gff$tX^:#^P' £it— >tH$rJB©ffiH' 

/£*r*. mmi<wt&map' fliAfcfp' = f (x) + P * ( X ) = 

(ffi + l3i) • xmo dN£J;DiHrr#&o it-A*35gr/8<£><if H' ^ ^J^.^ 
H' = t' (DmodNlliOH-STfS. JIJIT, t' ( 1 ) tt t * (x) 
X°x<Dftt)iO\Z. r 1 j £A*lTfh#UfcffiT*&&, 

-A^^-bTit-niESffflcDlitH' it— AMfrJEOffiH' fc3U 

*.fc£H' = t ' (Dmo'dNfciDtHtfS. ££T-, t* (i) ten# 

#^t'- (x) *V7L(Dixt>X)\z. r i j ^Anxth^ufeMT^^o 

it— nHtr^cffiH' ten.— if#£&K:it— nfcfctbfcD, »fl!7?3l#bfc 

0, &£Wa«§gT'&Sit&&<*:bT, &'£\Z.mto'tZ»&^:1Ffo%>o n— if© 
^gfO^fc^S^t'J 1 2fcOg§r£*lfc#^5£P' = t ' (x) +p' 

(x) t^^EU 1 2^6»^mLx^cFDHMicFDH<i:^— i^iCP' = (f 

(x) +p* (x) , FDH) tbT|H1tbT^#T§o 

(2) YX^- H^iJfflf 

SU»3B£S5 3tJ;J9^>^AfcSLicT (T<=Z N *) &?g£.~?Z>o Z. 
Z\X\ ZL—lfCDffimmWllZffiZfct^V 1 2^&IB'it^tl^^^tFDH 
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PfcP' = (p' (x) , FDH) ^M^tBfo atTt^p' (x) 

£j&-f3o j€ff^nfe#^P' P' =T+p' (x) mo dNi££Dif 

= T+p' (x) i^^eU 1 2^S^fctib£:FDHglifcFDH<*:£:— itP* 
= (T+p' (x) , FDH) thTUmVT&WTZ* 

M " 

/t©Hff'ft;M3il> 

(1) ^tFDHiltOTim (f©l) , ^iFDHit^ 

l) . ^iFDHM»:*fyfflbfc«^ (^©2) £W:h5*r#c©J:5te» 

* 

3e*fSnfc/^Xf7— HBasE^-^Htt, M*-fc£H = p (1) +t* (Dm 

(2) vx^-n&fufflf 

A* 2 ti^fc^^'J 4 1 ^5>^#$tlfe3.— tf I Dt/U^-miEf-^ 
H^fflt. "77^- HT^^EU 4 1 ^^i^tt}lfe/U7- KBKE5*— 
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*H#A#Sft&55B&Htt£jfcg2 7 te> ^-A##ffl<£>3Efr$*ltfi:AX «7— 
HBtET-^Hft4^t5. MffSn&AAy-h^SE^-^Hte, H= p 
(1) +TmodNfcj;Dtl'lTt§, it— /^(Dftmz&Z U 4 1 «J5*f 

< a x >7 - h mm?- & <d m§t - 2 > 

&z> 0 &it, z.(D^Emitmmiz^v)D— mztt-rz r ep 1 ay$cm&m<z. 

* 

(1) F.DHMifc£*iJfflbfci§£- 

-tf 1 teffi^fc^^u i 2^e»iHit$nfcP'= (s, fdh) &m 

^ffiT. :i— lW^T^3grbVV\ 0 X«7 — H (PW) tFDHM^FDHi 
S^S'^A^$tlfee»A°7. , 7- HMBE^— ^Mfr^i 1 6 3-—1ffc&m<D 



WO 2005/041474 PCT/JP2004/015184 

45 

w.mmcD^xv-Fmm^-fmt. m^.^h*=fdh (smipwii id 

(U) II ID (S) ) H<fcDlHTt§, Z\Z\X, ID (U) tID (S) \Z 
H'^n-if^ilS^+f— 7t2fC^bfcD, iSMTiHttLfcr), 
&£;*^U 1 2teM0r£*l£:P'= (S\ FDH) SIEISbT^T&o 

(i) FDHmm&mmvrzm-s 

**r, if— a 2 tefflf&fc^y 4 i fc«#2nfc:i-iF i Dt/u>7- Fig 

sex- * h si^aito if ©Higgle i tife-y— n^Ernm <D AX 
ME5*-^H£n— ifo^^si^^MsnfeH' iz-g.m-?z> 0 aodi*) 

^iA©S*il£Rpo T^fc t.lt fen— +f ©AX «7— F telf SgSHftJ ic 
o Tn— tf© AX <7- H fcmMWfcSfc^T* -5c 
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•£©1*— JMzm?-?^-? S' 1, S' n^i^fij-r^, ^ftf^-^S' 
i \fr—$<D I Dtfe§D I D tmzn.—vf(Dm^.^U 2 1 <fc D It — A CD 

UP', UH1. UHn^f, ^*l<=>£H§rT£o 

LSI, LS2) 04W7^-^TgStf§, DS, LSI, LS2IJ 
t%\z m®. J $>®L&<D&Z\Z>) X>5^ 5V <DU&'Brt>1*:<Dm&'V& D > DS 
ttf-^©«!Hc#t*ift v LS 1, L S 2ttJBftfc**T*»ttft«SL-T 

#a*&#^fc>1i:#lB3££ns. L S 1 fctt, IB#1f i^inT"bibfetiI> 
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s lieu— a {s> t^L-ifcDEi'fwt; (u> & j tnjen^®z>zt\$T*%ts:fr 

n 

ii-if©fti) {u} ^n^n^§ci<h^pitg^^^o m^^isse 

^^^T©^PS^H^«a--lf©0fW^ {U} tit— A* {S} ODW^ 

l s 2 icn-if (Dffimm {uj a* {sj ©m^b-e- {us} &xnz> 

#l\Z, M2 2$#itt, 0 2 1 fC^-r^-^^m^S 1 MT^o 
«ISE$5 1 1 teA^tlfcA^-^n , k£$&^#m§§5 1 2 fcfflrT . 

1 2ttA*$nfc/^^^n, kiC^Vi^#^— ^DATA§ (k, 
n) Mf-^Sl, S 2". S n fcfltS. #Kl, waE«5 11tt5*— 
^<£> I DT&SD I D*^f-^#1S5 1 3 <D\tjx&£.f&V ; r— 

»tbTn-k+lffl«Jt©^*5 f -^&l*-ftft;'rs. SI, Sn 
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